$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa File: e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa (raw, json) Hash identifier: kazQVWw3f6bjeEVz1LzY9phusICbGHD0nQt021fXetk= Subject key identifier: 11:3B:00:56:55:C7:5B:1F:C8:33:83:4F:62:4E:4C:DE:A5:51:29:9B Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B1806DEBECB57E6CA0FA4BE80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11290 IP address blocks: 24.231.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:de:be:cb:57:e6:ca:0f:a4:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=9ed55198-8ecc-465e-af3b-86f9a90dd0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ca:d9:92:5e:aa:90:c7:a4:9b:89:86:ba:9d: f2:6b:19:87:ab:86:21:7d:7e:0f:19:f4:4b:29:72: 98:a5:6a:9e:0c:6a:d0:39:1e:08:82:9f:fd:a4:9e: 02:f0:2c:cf:31:d3:f7:4c:b5:0d:7e:0a:fa:f4:0f: db:eb:67:f6:96:8c:fc:be:9c:7f:6a:bb:0c:38:6f: db:45:1a:62:f2:4b:37:27:79:27:5c:17:71:96:df: f7:b7:e1:66:60:26:45:72:20:64:e5:b9:3f:55:1a: e9:61:6c:3b:38:c5:2c:4d:06:59:d5:63:d9:a2:dc: 7e:67:86:78:27:d8:bf:67:c8:06:97:72:dc:ab:0c: f2:a0:85:f6:c6:50:39:5a:34:6b:8b:38:e2:2c:0c: d9:02:78:fb:4a:a0:89:a7:9a:d4:9c:c7:46:80:8c: b8:5f:17:9b:9a:40:c3:5c:ea:45:c2:f6:24:2a:3f: 40:a3:7b:15:b3:ab:bd:4a:18:89:18:93:18:2b:da: 1f:ee:e4:b4:0f:aa:1d:6f:38:f6:f8:74:17:3c:da: 60:96:97:0c:dd:8e:49:5f:03:75:0f:dd:0e:79:f1: 6e:e2:b2:62:e3:f3:26:88:d0:2c:07:9c:79:bc:7b: 64:a2:1b:8a:0f:f8:73:01:fb:e9:4d:ec:1a:37:2d: 82:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3B:00:56:55:C7:5B:1F:C8:33:83:4F:62:4E:4C:DE:A5:51:29:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.231.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:74:b0:7c:1e:db:da:71:a6:a1:b4:52:c5:e4:be:2f:4a:70: af:ff:c1:7e:8e:38:93:19:35:b7:91:45:c5:1f:74:1e:8e:59: 50:f7:ce:46:36:d4:19:c5:21:21:6b:63:90:e6:3a:83:4c:c2: ef:be:c4:32:50:3d:20:88:ae:f8:7a:67:31:f8:7e:ea:3e:ab: 0f:fa:a9:cd:60:47:a7:00:11:39:0b:8b:ed:ac:77:ae:3a:59: d5:27:62:6f:a2:73:0f:56:31:2e:89:4f:e2:17:bf:cd:8f:85: ab:32:94:35:d7:0f:9c:f4:84:a8:1a:3e:e6:14:6b:e1:99:87: b3:75:0f:c5:74:70:1f:72:49:c2:10:00:5c:63:f3:ce:ba:ad: 3f:80:05:e7:8e:44:5d:68:4d:36:86:51:fc:29:f2:7f:ee:ba: d7:99:4b:02:f2:8c:6b:20:62:da:6e:7e:bb:d6:64:60:cb:92: 3a:79:ee:a0:98:23:a2:7c:3b:9b:eb:95:86:c9:2f:a3:19:78: 27:7e:d4:f8:27:93:25:2d:41:46:14:ac:fd:b3:bf:e4:6e:e3: f5:95:76:4f:b5:4f:64:23:de:fe:6b:65:7d:1f:37:b2:9c:1b: fd:5a:2b:2c:de:02:33:96:c2:d5:0e:73:9f:53:ea:96:f1:a9: fc:15:52:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBt6+y1fmyg+kvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk OWVkNTUxOTgtOGVjYy00NjVlLWFmM2ItODZmOWE5MGRkMGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMrZkl6qkMekm4mGup3yaxmHq4YhfX4PGfRL KXKYpWqeDGrQOR4Igp/9pJ4C8CzPMdP3TLUNfgr69A/b62f2loz8vpx/arsMOG/b RRpi8ks3J3knXBdxlt/3t+FmYCZFciBk5bk/VRrpYWw7OMUsTQZZ1WPZotx+Z4Z4 J9i/Z8gGl3LcqwzyoIX2xlA5WjRrizjiLAzZAnj7SqCJp5rUnMdGgIy4XxebmkDD XOpFwvYkKj9Ao3sVs6u9ShiJGJMYK9of7uS0D6odbzj2+HQXPNpglpcM3Y5JXwN1 D90OefFu4rJi4/MmiNAsB5x5vHtkohuKD/hzAfvpTewaNy2CHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBE7AFZVx1sfyDODT2JOTN6lUSmbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZTA4NjViYTEtNzIxNy0z YmRjLWJkZmMtODhjMzdjMmYzYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGOcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACd0sHwe29pxpqG0UsXkvi9KcK//wX6OOJMZNbeRRcUfdB6OWVD3zkY2 1BnFISFrY5DmOoNMwu++xDJQPSCIrvh6ZzH4fuo+qw/6qc1gR6cAETkLi+2sd646 WdUnYm+icw9WMS6JT+IXv82PhasylDXXD5z0hKgaPuYUa+GZh7N1D8V0cB9yScIQ AFxj8866rT+ABeeORF1oTTaGUfwp8n/uuteZSwLyjGsgYtpufrvWZGDLkjp57qCY I6J8O5vrlYbJL6MZeCd+1PgnkyUtQUYUrP2zv+Ru4/WVdk+1T2Qj3v5rZX0fN7Kc G/1aKyzeAjOWwtUOc59T6pbxqfwVUgE= -----END CERTIFICATE-----Generated at Mon Nov 3 14:44:57 2025 by rpki-client